diff options
| author | Daniel Reichelt <hacking@nachtgeist.net> | 2017-02-06 22:45:02 +0100 |
|---|---|---|
| committer | Milan Broz <gmazyland@gmail.com> | 2017-03-02 09:11:23 +0100 |
| commit | 9a798a766e99c212827f9a16feebf830d50b6c5a (patch) | |
| tree | bb3f66bcd377c703da201ad12eb1b44544f2ffbf /man | |
| parent | 36419b25aa7641fc115f2e7a38cb03edd155a463 (diff) | |
| download | cryptsetup-9a798a766e99c212827f9a16feebf830d50b6c5a.tar.gz | |
support PIM parameter for VeraCrypt compatible devices
This patch adds the --veracrypt-pim=INT and --veracrypt-query-pim command-
line parameters to support specification of or being queried for a custom
Personal Iteration Multiplier respectively. This affects the number of
iterations for key derivation from the entered password. The manpage is
also updated accordingly.
Fixes Issue #307.
Diffstat (limited to 'man')
| -rw-r--r-- | man/cryptsetup.8 | 13 |
1 files changed, 12 insertions, 1 deletions
diff --git a/man/cryptsetup.8 b/man/cryptsetup.8 index b3cce841..a3e54891 100644 --- a/man/cryptsetup.8 +++ b/man/cryptsetup.8 @@ -450,11 +450,22 @@ Cryptsetup should recognize all header variants, except legacy cipher chains using LRW encryption mode with 64 bits encryption block (namely Blowfish in LRW mode is not recognized, this is limitation of kernel crypto API). -To recognize VeraCrypt device use \fB\-\-veracrypt\fR option. +To recognize a VeraCrypt device use the \fB\-\-veracrypt\fR option. VeraCrypt is just extension of TrueCrypt header with increased iteration count so unlocking can take quite a lot of time (in comparison with TCRYPT device). +To open a VeraCrypt device with a custom Personal Iteration Multiplier (PIM) +value, \fBadditionally to --veracrypt \fR use either the +\fB--veracrypt-pim=<PIM>\fR option to directly specify the PIM on the command- +line or use \fB--veracrypt-query-pim\fR to be prompted for the PIM. + +The PIM value affects the number of iterations applied during key derivation. Please refer to +\fBhttps://veracrypt.codeplex.com/wikipage?title=Personal%20Iterations%20Multiplier%20(PIM)\fR +for more detailed information. + + + \fBNOTE:\fR Activation with \fBtcryptOpen\fR is supported only for cipher chains using LRW or XTS encryption modes. |